I am following the howto on
https://linuxhostsupport.com/blog/how-to-install-ldap-on-centos-7/
which matches a number of other howto's.
I have tried this on two Centos 7 boxes and both fail in the same way when trying to set the certificates. I have tried <insert search engine here> without success. I found that by adding '-d 1' you enable debugging, but the debugging did not help.
Anyone got any suggestions? All steps prior to this worked successfully.
Gary
[root@eddie ldap]# ldapmodify -Y EXTERNAL -H ldapi:/// -f certs.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 modifying entry "cn=config" ldap_modify: Other (e.g., implementation specific) error (80)
[root@eddie ldap]# cat certs.ldif dn: cn=config changetype: modify replace: olcTLSCertificateFile olcTLSCertificateFile: /etc/openldap/certs/myldap.ringways.com.cert
dn: cn=config changetype: modify replace: olcTLSCertificateKeyFile olcTLSCertificateKeyFile: /etc/openldap/certs/myldap.ringways.com.key [root@eddie ldap]# ll /etc/openldap/certs/ total 72 -rw-r--r--. 1 ldap ldap 65536 Sep 30 11:19 cert8.db -rw-r--r--. 1 ldap ldap 16384 Sep 30 11:19 key3.db -rw-r--r--. 1 ldap ldap 1493 Sep 30 12:16 myldap.ringways.com.cert -rw-r--r--. 1 ldap ldap 1704 Sep 30 12:16 myldap.ringways.com.key -r--r-----. 1 ldap ldap 45 Jul 29 2020 password -rw-r--r--. 1 ldap ldap 16384 Jul 29 2020 secmod.db [root@eddie ldap]#
On 30.09.21 16:49, Gary Stainburn wrote:
[root@eddie ldap]# ldapmodify -Y EXTERNAL -H ldapi:/// -f certs.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 modifying entry "cn=config" ldap_modify: Other (e.g., implementation specific) error (80)
[root@eddie ldap]# cat certs.ldif dn: cn=config changetype: modify replace: olcTLSCertificateFile olcTLSCertificateFile: /etc/openldap/certs/myldap.ringways.com.cert
dn: cn=config changetype: modify replace: olcTLSCertificateKeyFile olcTLSCertificateKeyFile: /etc/openldap/certs/myldap.ringways.com.key
Try to swap the ldif order. See
https://askubuntu.com/questions/936382/openldap-error-configuring-starttls-l...
Best regards Ulf